Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: TuS+U9a1BA9ajrklurVfS3rLP8pAkcRSE3BtNnXGoyo=
Subject key identifier: 4A:AD:64:3E:07:8D:BF:B8:50:E5:3D:32:0A:02:AC:15:73:B8:77:2D
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019A4F6218831700226726EB22C9F61B3737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 05EB
Signing time: Tue 04 Nov 2025 15:00:19 +0000
Manifest this update: Tue 04 Nov 2025 15:00:19 +0000
Manifest next update: Wed 05 Nov 2025 15:00:19 +0000
Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: Vam/xvR9icQvDo1R/4pKbwmL0wApA+y43pC+ltZKuHQ=)
2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:18:83:17:00:22:67:26:eb:22:c9:f6:1b:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Nov 4 15:00:19 2025 GMT
Not After : Nov 5 15:00:19 2025 GMT
Subject: CN=4aad643e078dbfb850e53d320a02ac1573b8772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:0f:5c:e1:82:6f:35:c7:6a:74:51:db:f0:
13:37:e6:d9:ef:88:c5:ad:b4:50:53:c6:b3:96:a8:
d1:35:01:b6:4c:1d:53:47:97:67:4a:ff:d3:26:1c:
32:a7:1e:b5:fd:27:0a:0f:52:cf:3b:8f:03:e7:75:
85:8c:69:cc:16:4e:fa:67:da:75:80:8a:5e:87:43:
10:aa:20:6b:2a:b9:93:30:79:77:56:d2:76:03:3d:
63:e7:12:a7:cf:2d:0d:0b:3d:c5:86:67:c8:e4:03:
f5:61:1b:f0:3f:c2:4c:da:48:7e:85:b4:72:a6:df:
84:09:b6:fc:da:31:24:50:bc:3e:6b:2e:e4:20:d1:
09:ce:63:52:86:87:80:60:23:20:af:af:a8:ab:4c:
b1:bb:f0:0f:04:be:1c:41:e6:d0:81:f3:b0:7e:63:
3a:7c:f9:94:63:7d:8f:19:22:94:42:30:1f:3b:ea:
d3:8d:e9:56:c4:54:5c:03:69:06:47:12:27:c6:a5:
bd:27:2f:cd:15:75:0f:11:9c:9b:9a:34:a6:7b:8a:
d0:86:fa:4d:dc:5c:95:e9:5d:27:b0:01:e1:34:b5:
38:3d:cc:94:a5:f8:43:79:b6:a6:5b:28:37:43:3b:
da:1c:73:63:5d:81:76:27:00:97:53:9d:ac:a9:ee:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:64:3E:07:8D:BF:B8:50:E5:3D:32:0A:02:AC:15:73:B8:77:2D
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:52:81:ff:06:c6:0e:ef:c4:81:a7:d9:3f:da:f2:2e:2b:21:
53:23:17:e4:df:95:82:9a:3a:fb:29:fa:22:18:b1:7d:f8:93:
a9:05:aa:3f:07:30:7c:38:c0:8e:9a:e9:6c:0d:a9:58:73:f5:
6b:2b:5f:b5:ed:48:5b:bc:25:76:fb:2c:51:a7:c0:13:98:4c:
48:20:c2:fe:d3:c2:2e:9d:43:f7:a8:a5:2a:f3:26:0e:f9:4d:
a8:14:00:34:af:74:dd:00:b3:74:d4:13:46:0a:25:6a:11:5b:
86:3f:a1:00:92:c5:3c:a4:29:aa:10:09:04:ef:42:15:2a:f1:
a7:47:4a:f1:5b:65:b9:22:ea:6a:2b:29:05:2e:2f:cd:72:bd:
0a:06:59:49:69:f8:86:7b:10:d2:05:07:e6:62:3f:db:00:97:
66:06:96:05:1c:55:5d:47:e6:7e:96:2d:1c:a5:0c:9f:21:4a:
b3:a1:fa:63:d7:69:0b:4b:db:2f:a3:fa:4b:1c:50:c6:56:d2:
16:7d:8b:1d:45:af:f5:df:19:bc:38:bb:f2:73:23:bd:a8:5c:
43:94:59:cb:e4:32:d5:58:58:19:f5:0a:b9:be:0b:9e:52:d6:
63:2a:68:50:34:fe:25:2a:c7:c4:96:14:4a:8f:6a:ff:e1:f0:
01:d4:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:09 2025 by rpki-client